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FINAL ACTION 

1. This action is in response to Amendment filed 1/5/2009. Claims 1, 4-9, and 16 
have been amended. Claims 2 and 3 are cancelled. Claims (1, 4-21) are pending. 

Claim Rejections - 35 USC §112 

The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

2. Claims 1, 8, and 16 are rejected under 35 U.S.C. 112, first paragraph, as failing 
to comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. Examiner contends applicant's newly 
amended claim limitation element of, "to supervise the operation of an OS running 
on said computer" is not supported by applicant's original disclosure. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

3. Claims 1 , and 4-21 is rejected under 35 U.S.C. 1 03(a) as being unpatentable 
over Mathiassen et al. (US Patent Application No. 2004/01231 13 and Mathiassen 
hereinafter) in view of Deng et al. (US Patent Publication No. 2004/0267987 and Deng 
hereinafter) further in view of Cheng (WO 01/61692 (cited from IDS)). 

4. As to claim 1 , Mathiassen teaches a electronic data management apparatus 
comprising: 

data storing means storing data [fig. lb]; identification data storing means having 
identification data for authentication registered therein [fig. lb]; 

input means for entering authentication information about a user [fig. lb]; 
authentication means performing authentication of said user by comparing data entered 
from said input means with said identification data registered in said identification data 
storing means (i.e., ... teaches providing increased security by bridging the functionality 
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of biometrics input from a user and, upon positive authentication of the user's fingerprint 
locally to provide secure communication with the said access-limited apparatus, device, 
network or system, whether local or remote .... further teaches a corresponding method 
of using the portable device or the embedded device is disclosed for providing a bridge 
from biometrics input to a computer locally [abstract]); 

and interface means connected to an electronic computer to transmit and receive 
said data [fig. lb]; 

where access to said data is permitted when said entered data and said 
identification data match each other as a result of said authentication (i.e., ... teaches 
upon positive authentication of the user's fingerprint locally to provide secure 
communication with the said access-limited apparatus [abstract]); 

said electronic data management apparatus further comprising: 

program storing means storing a control program [fig. lb]; 

wherein after said user has been authenticated by said authentication means, 
said control program is installed in said computer to enable reading said data from said 
computer [abstract]. 

wherein after said user has been authenticated by said authentication means 
(abstract), 

Mathiassen does not expressly teach the claim limitation element of: 

program storing means storing a control program which is installed in said 
computer to allow a user to perform an operation by using said user data on said 
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computer and to supervise the operation of an OS running on said computer and the 
operation of an application program and switch control means selectively switching 
between said data storing means and said program storing means; 

said electronic data management apparatus is unlocked and allows said 
computer connected thereto to start automatic recognition of said electronic data 
management apparatus, and said switch control means selectively switches said data 
storing means into said program storing means to enable reading said data from said 
computer. 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Mathiassen as introduced by Deng. Deng 
discloses: 

switch control means selectively switching between said data storing means and 
said program storing means (to provide switch control means for selectively switching 
[fig- 6]); 

said electronic data management apparatus is unlocked and allows said 
computer connected thereto to start automatic recognition of said electronic data 
management apparatus (to provide automatic recognition means (e.g., drive icon is 
immediately generated) for a USB apparatus plugged into a computer [fig. 6]), and said 
switch control means selectively switches said data storing means into said program 
storing means to enable reading said data from said computer (to provide switch control 
means for selectively switching [fig. 6]). 
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Therefore, given the teachings of Deng, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
Mathiassen by employing the well known feature of USB interface disclosed above by 
Deng, for which electronic data management will be enhanced [fig. 6]. 

The combination of Mathiassen and Deng does not expressly teach: 

program storing means storing a control program which is installed in said 

computer to allow a user to perform an operation by using said user data on said 

computer and to supervise the operation of an OS running on said computer and the 

operation of an application program, 

said program storing means is recognized by said computer, and said control 

program is installed automatically in said computer, 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Mathiassen as introduced by Deng. Deng 
discloses: 

program storing means (e.g., computer) storing a control program (e.g., pre- 
installed) which is installed in said computer to allow a user to perform an operation 
(e.g. enter a password) by using said user data on said computer and to supervise (e.g., 
pre-installed software interfacing with the OS) the operation of an OS running on said 
computer and the operation of an application program (to provide storage means for a 
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control program used to interface with a computer's operating system for the purpose of 
communicating with USB devices [pg. 5, lines 20-25]), 

said program storing means (e.g., USB) is recognized by said computer (to 
provide USB interface capability such that when the USB device is plug into a computer, 
driver software on the computer recognizes the USB device to establish communication 
with the USB plug-in [fig. 3, 20, 21]), and said control program is installed automatically 
in said computer (to provide for the capability to install a program from a USB device 
[pg. 7, lines 10-20]). 

Therefore, given the teachings of Cheng, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
the combination of Mathiassen and Deng by employing the well known feature of pre- 
install programs for USB device communication disclosed above by Cheng, for which 
electronic data management will be enhanced [pg. 7, lines 10-20]. 

5. As to claim 2. (cancelled) 

6. As to claim 3. (cancelled) 

7. As to claim 4, Mathiassen teaches a electronic data management apparatus 
where writing to said data storing means can be performed from said computer (i.e., ... 
teaches the event is logged in the non-volatile memory of the IC [par. 136]), and a 
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history of handling said data on said computer or a history of operating said computer to 
handle said data is written to said data storing means by said control program (i.e., ... 
teaches to log all accesses for subsequent review [par. 122]). 

8. As to claim 5, Mathiassen teaches a electronic data management apparatus 
where said identification data is fingerprint data, wherein fingerprint information about 
said user is entered from said input means and said authentication means performs 
fingerprint authentication of said user [abstract]. 

9. As to claim 6, Mathiassen teaches a electronic data management apparatus 
where said identification data is a registered personal identification number, wherein a 
personal identification number is entered from said input means and said authentication 
means authenticates said user by comparing said personal identification number with 
said registered personal identification number (i.e., ... teaches registration is performed 
by entering the name of the system administrator into the access administration table, 
as well as user ID, which may be the unique national identity number [par. 128]. Those 
skilled in the art would recognize inherent to the teaching of Mathiassen unique id and 
number is comparison authentication of such data). 

1 0. As to claim 7, Mathiassen teaches a electronic data management apparatus 
where said authentication means has a mechanical lock and a key, so that said user 
having said key (i.e., user ID) is permitted to access said data (i.e., ... teaches the 
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matching of the access minutiae table does not match the stored master minutiae table 
of the user ID entered, then the locking pin of the locking mechanism [par. 137]). 

11. As to claim 8, Mathiassen teaches a control program for use with an electronic 
data management apparatus, said electronic data management apparatus having: 

an authentication information storing area that stores registered authentication 
information [abstract^ 

an input section for entering identification information about a user [fig. lb]; 

an authentication section having an authentication function of performing 
authentication of said user by comparing said authentication information and said 

identification information with each other (i.e teaches upon positive authentication of 

the user's fingerprint locally to provide secure communication with the said access- 
limited apparatus [abstract]); a data storing area that stores data; 

and a program storing area that stores a control program [fig. lb]; 

where when said electronic data management apparatus is connected to an 
electronic computer, said authentication section performs said authentication of said 
user, and upon completion of said authentication, said user is permitted to access said 
data storing area (i.e., ... teaches upon positive authentication of the user's fingerprint 
locally to provide secure communication with the said access-limited apparatus 
[abstract]); 
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where when an operation is performed on said computer by using said data, said 
control program operates said computer so as to store a history of said operation (i.e., 
... teaches the event is logged in the non-volatile memory of the IC [par. 136]). 

Mathiassen does not expressly teach the claim limitation element of: 

program storing means storing a control program which is installed in said 
computer to allow a user to perform an operation by using said user data on said 
computer and to supervise the operation of an OS running on said computer and the 
operation of an application program and switch control means selectively switching 
between said data storing means and said program storing means; 

said electronic data management apparatus is unlocked and allows said 
computer connected thereto to start automatic recognition of said electronic data 
management apparatus, and said switch control means selectively switches said data 
storing means into said program storing means to enable reading said data from said 
computer. 
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However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Mathiassen as introduced by Deng. Deng 
discloses: 

switch control means selectively switching between said data storing means and 
said program storing means (to provide switch control means for selectively switching 
[fig- 6]); 

said electronic data management apparatus is unlocked and allows said 
computer connected thereto to start automatic recognition of said electronic data 
management apparatus (to provide automatic recognition means (e.g., drive icon is 
immediately generated) for a USB apparatus plugged into a computer [fig. 6]), and said 
switch control means selectively switches said data storing means into said program 
storing means to enable reading said data from said computer (to provide switch control 
means for selectively switching [fig. 6]). 

Therefore, given the teachings of Deng, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
Mathiassen by employing the well known feature of USB interface disclosed above by 
Deng, for which electronic data management will be enhanced [fig. 6]. 

The combination of Mathiassen and Deng does not expressly teach: 

program storing means storing a control program which is installed in said 
computer to allow a user to perform an operation by using said user data on said 
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computer and to supervise the operation of an OS running on said computer and the 
operation of an application program, 

said program storing means is recognized by said computer, and said control 
program is installed automatically in said computer, 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Mathiassen as introduced by Deng. Deng 
discloses: 

program storing means (e.g., computer) storing a control program (e.g., pre- 
installed) which is installed in said computer to allow a user to perform an operation 
(e.g. enter a password) by using said user data on said computer and to supervise (e.g., 
pre-installed software interfacing with the OS) the operation of an OS running on said 
computer and the operation of an application program (to provide storage means for a 
control program used to interface with a computer's operating system for the purpose of 
communicating with USB devices [pg. 5, lines 20-25]), 

said program storing means (e.g., USB) is recognized by said computer (to 
provide USB interface capability such that when the USB device is plug into a computer, 
driver software on the computer recognizes the USB device to establish communication 
with the USB plug-in [fig. 3, 20, 21]), and said control program is installed automatically 
in said computer (to provide for the capability to install a program from a USB device 
[pg. 7, lines 10-20]). 
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Therefore, given the teachings of Cheng, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
the combination of Mathiassen and Deng by employing the well known feature of pre- 
install programs for USB device communication disclosed above by Cheng, for which 
electronic data management will be enhanced [pg. 7, lines 10-20]. 

12. As to claim 9, Mathiassen teaches a control program for use with an electronic 
data management where when said electronic data management apparatus is 
disconnected from said computer, said control program deletes said data transmitted 
into said computer (i.e., .. Those skilled in the art would recognize the automatic 
disappearance of program when apparatus becomes disconnected as applicant claims 
is merely inherent behavior of a USB connection. Examiner submits Mathiassen 
teaches USB connection [fig. lb]. 

13. As to claim 10, Mathiassen teaches a control program for use with an electronic 
data management apparatus which incorporates an automatic disappearance program 
having a function of causing said control program to disappear automatically when said 
electronic data management apparatus is disconnected from said computer (i.e., .. 
Those skilled in the art would recognize the automatic disappearance of program when 
apparatus becomes disconnected as applicant claims is merely inherent behavior of a 
USB connection. Examiner submits Mathiassen teaches USB connection [fig. lb]). 
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14. As to claim 1 1 , Mathiassen teaches a control program for use with an electronic 
data management apparatus which has a function of becoming disabled from operating 
in said computer (i.e., .. Those skilled in the art would recognize the automatic 
disappearance of program when apparatus becomes disconnected as applicant claims 
is merely inherent behavior of a USB connection. Examiner submits Mathiassen 
teaches USB connection [fig. lb]). 

15. As to claim 12, Mathiassen teaches a control program for use with an electronic 
data management apparatus which has: a history obtaining function of obtaining at least 
one history selected from histories of duplicating, deleting, editing, viewing, reading and 
writing said data on said computer, or a history of files or new data created by using 
said data (i.e., ... teaches the event is logged in the non-volatile memory of the IC [par. 
136]); a data recording function of writing said history to said data storing area (i.e., ... 
teaches the event is logged in the non-volatile memory of the IC [par. 136]); 

and a transmission function of transmitting said history by using communication 
means (i.e., teaches copied to the database of the terminal (42) and optionally to a 
server of a network [par. 136]). 

16. As to claim 13, Mathiassen teaches a control program for use with an electronic 
data management apparatus where said history is an operation history of operating 
from input means of said computer (i.e., ... teaches the event is logged in the non- 
volatile memory of the IC [par. 136]). 
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17. As to claim 14, Mathiassen teaches a control program for use with an electronic 
data management apparatus which limits a file system of said computer so as to permit 
only at least one operation selected from duplicating, deleting, editing, viewing, reading 
and writing said data on said computer by a specific application program or arbitrarily 
(i.e., ...teaches the IC is adapted to provide data to the external access-limited 
apparatus [par. 50]). 

18. As to claim 15, Mathiassen teaches a control program for use with an electronic 
data management apparatus which runs in a kernel mode in which all instructions of an 

OS of said computer are executable (i.e teaches a pre- processing block (SC) using 

hardware-embedded algorithms optimized for the laborious initial high-speed 
processing [par. 68]). 

19. As to claim 16, Mathiassen teaches a electronic data management method 
using an electronic data management apparatus said electronic data management 
apparatus having: an authentication information storing section that stores 
authentication information [abstract]; 

an input section for entering authentication information about a user [fig. lb]; 
an authentication section that performs authentication of said user by using data 
from said input section [abstract]; 
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and a data storing section that stores user data (i.e., ...teaches extra storage 
capacity, the IC can be equipped with a USB mass storage class controller with at least 
one control endpoint and 2 bulk endpoints (in/out) in order to provide access to data 
onboard the portable device [par. 58]); 

where when said electronic data management apparatus is connected to an 
electronic computer [fig. lb], said authentication section performs said authentication of 
said user, and said user having said authentication information matching said 
authentication information registered in said authentication information storing section is 
permitted to access said user data (i.e., ... teaches upon positive authentication of the 
user's fingerprint locally to provide secure communication with the said access-limited 
apparatus [abstract]); 

where said electronic data management apparatus has a program storing section 
that stores a control program, and upon completion of said authentication by said 
authentication means [abstract], 

Mathiassen does not expressly teach the claim limitation element of: 

program storing means storing a control program which is installed in said 
computer to allow a user to perform an operation by using said user data on said 
computer and to supervise the operation of an OS running on said computer and the 
operation of an application program and switch control means selectively switching 
between said data storing means and said program storing means; 
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said electronic data management apparatus is unlocked and allows said 
computer connected thereto to start automatic recognition of said electronic data 
management apparatus, and said switch control means selectively switches said data 
storing means into said program storing means to enable reading said data from said 
computer. 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Mathiassen as introduced by Deng. Deng 
discloses: 

switch control means selectively switching between said data storing means and 
said program storing means (to provide switch control means for selectively switching 
[fig- 6]); 

said electronic data management apparatus is unlocked and allows said 
computer connected thereto to start automatic recognition of said electronic data 
management apparatus (to provide automatic recognition means (e.g., drive icon is 
immediately generated) for a USB apparatus plugged into a computer [fig. 6]), and said 
switch control means selectively switches said data storing means into said program 
storing means to enable reading said data from said computer (to provide switch control 
means for selectively switching [fig. 6]). 

Therefore, given the teachings of Deng, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
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Mathiassen by employing the well known feature of USB interface disclosed above by 
Deng, for which electronic data management will be enhanced [fig. 6]. 

The combination of Mathiassen and Deng does not expressly teach: 

program storing means storing a control program which is installed in said 

computer to allow a user to perform an operation by using said user data on said 

computer and to supervise the operation of an OS running on said computer and the 

operation of an application program, 

said program storing means is recognized by said computer, and said control 

program is installed automatically in said computer, 

said control program is installed in said computer to ensure a use environment in 

which said data is used in said computer. 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Mathiassen as introduced by Deng. Deng 
discloses: 

program storing means (e.g., computer) storing a control program (e.g., pre- 
installed) which is installed in said computer to allow a user to perform an operation 
(e.g. enter a password) by using said user data on said computer and to supervise (e.g., 
pre-installed software interfacing with the OS) the operation of an OS running on said 
computer and the operation of an application program (to provide storage means for a 
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control program used to interface with a computer's operating system for the purpose of 
communicating with USB devices [pg. 5, lines 20-25]), 

said program storing means (e.g., USB) is recognized by said computer (to 
provide USB interface capability such that when the USB device is plug into a computer, 
driver software on the computer recognizes the USB device to establish communication 
with the USB plug-in [fig. 3, 20, 21]), and said control program is installed automatically 
in said computer (to provide for the capability to install a program from a USB device 
[pg. 7, lines 10-20]). 

said control program is installed in said computer to ensure a use environment in 
which said data is used in said computer (to provide storage means for a control 
program used to interface with a computer's operating system for the purpose of 
communicating with USB devices [pg. 5, lines 20-25]). 

Therefore, given the teachings of Cheng, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
the combination of Mathiassen and Deng by employing the well known feature of pre- 
install programs for USB device communication disclosed above by Cheng, for which 
electronic data management will be enhanced [pg. 7, lines 10-20]. 

20. As to claim 17, Mathiassen teaches a electronic data management method 
where said use environment is a limitation that permits access to said data only from a 
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specific application program that runs on said computer (i.e., ...teaches the IC is 
adapted to provide data to the external access-limited apparatus [par. 50]). 

21 . As to claim 18, Mathiassen teaches a electronic data management method 
where said control program has a function of leaving a history of operating from input 
means of said computer, or a history of access to said data in at least one operation 
selected from duplicating, deleting, editing, viewing, reading and writing operations 
using said data, or a history of files or new data created by using said data (i.e., ... 
teaches the event is logged in the non-volatile memory of the IC [par. 136]). 

22. As to claim 19, Mathiassen teaches a electronic data management method 
according to claim 16, wherein when said electronic data management apparatus is 
disconnected from said computer, said control program deletes at least one of said data 
in said computer, duplicates of said data, and data or files created by using said data 
(i.e., .. Those skilled in the art would recognize the automatic disappearance of program 
when apparatus becomes disconnected as applicant claims is merely inherent behavior 
of a USB connection. Examiner submits Mathiassen teaches USB connection [fig. lb]). 

23. As to claim 20, Mathiassen teaches a electronic data management method 
where said control program incorporates an automatic disappearance program having a 
function of causing said control program to disappear automatically (i.e., .. Those skilled 
in the art would recognize the automatic disappearance of program when apparatus 
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becomes disconnected as applicant claims is merely inherent behavior of a USB 
connection. Examiner submits Mathiassen teaches USB connection [fig. lb]). 

24. As to claim 21 , Mathiassen teaches a electronic data management method 
where said control program has a function of becoming disabled from functioning in said 
computer (i.e., ...Those skilled in the art would recognize the automatic disappearance 
of program when apparatus becomes disconnected as applicant claims is merely 
inherent behavior of a USB connection. Examiner submits Mathiassen teaches USB 
connection [fig. lb]). 

Response to Arguments 

Applicant's arguments with respect to claims 1 , 4-21 have been considered but 
are moot in view of the new ground(s) of rejection. Examiner contends the teachings of 
prior reference Deng, provides selectively switching means between data and program 
storage means. Examiner further contends the teachings of prior art reference Cheng, 
provides for the capability to install programs from a USB device to a computer. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 



Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BRYAN WRIGHT whose telephone number is (571)270- 
3826. The examiner can normally be reached on 8:30 am - 5:30 pm Monday -Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, AYAZ Sheikh can be reached on (571)272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/BRYAN WRIGHT/ 
Examiner, Art Unit 2431 

/Ayaz R. Sheikh/ 
Supervisory Patent Examiner, Art Unit 2431 



